
$ rpki-client -vvf rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
File: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft (raw, json)
Hash identifier: DqwTg5TAjDDxsWIE0R8kYq8b9R8MCsj5ObOvObxJ2e8=
Subject key identifier: 6A:D5:36:75:AD:AC:4D:40:BA:60:3C:C6:47:D3:4A:18:7A:CB:43:23
Authority key identifier: 56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE
Certificate issuer: /CN=A91433B3/serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE
Certificate serial: 024D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
Manifest number: 0247
Signing time: Sun 05 Apr 2026 01:57:33 +0000
Manifest this update: Sun 05 Apr 2026 01:57:33 +0000
Manifest next update: Sun 12 Apr 2026 01:57:33 +0000
Files and hashes: 1: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl (hash: 5o7qscZgykTcmO1X8U3rYdT3VIn5meBEAgAvMLOWwVk=)
2: AB6C302EB5F311EDA0148B2DC4F9AE02.roa (hash: bR0oOLC6N9iYPyxoInRh6y+czJ5j13C0mZMU7jGh1QE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl
rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:57:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589 (0x24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91433B3, serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE
Validity
Not Before: Apr 5 01:57:33 2026 GMT
Not After : Apr 12 01:57:33 2026 GMT
Subject: CN=69d1c18d-e6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fa:23:3c:30:58:e2:1e:79:8c:10:94:d6:f4:
16:29:3f:cb:94:2e:03:ba:48:7a:a8:b9:68:a1:af:
3e:38:a8:73:39:b3:53:08:83:49:97:bf:36:d0:fd:
83:8a:ae:5b:39:41:58:8a:f4:76:6f:0a:fa:3d:18:
4a:75:ec:bf:3a:98:53:3b:b4:0d:87:be:f0:a4:14:
33:27:66:41:2b:3b:db:be:83:9b:3e:6c:b4:ea:00:
5b:bd:50:8f:9c:d2:91:49:55:61:b0:57:19:0b:e6:
b2:2f:da:69:0d:b6:70:84:d0:6d:51:3f:8b:7f:0c:
1a:06:09:4b:18:d0:0f:8d:47:c1:02:fb:20:72:22:
7a:65:0a:55:2f:b5:cf:a4:76:8d:59:de:1c:3f:d8:
16:75:f9:e1:4c:32:00:5a:a6:77:79:5b:ca:7a:3a:
1a:55:c0:22:be:6b:55:53:61:91:f2:19:70:6f:99:
b8:23:d0:7a:23:25:05:1c:74:24:1e:c2:58:55:49:
4a:87:83:d9:a4:73:36:72:5e:f1:9a:64:8d:56:45:
94:36:37:84:c2:d6:1f:cc:d6:14:9c:aa:be:22:95:
4e:68:7b:2b:c3:d1:b2:40:6c:97:cb:50:dc:3e:bf:
fa:76:fd:9e:c6:ef:82:0d:23:da:cc:d6:45:2c:43:
68:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D5:36:75:AD:AC:4D:40:BA:60:3C:C6:47:D3:4A:18:7A:CB:43:23
X509v3 Authority Key Identifier:
keyid:56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2f:3c:cc:89:1e:5d:e1:99:ce:a8:92:77:f7:ef:c0:02:40:
40:a6:d6:85:8b:ae:f2:a2:be:85:81:7c:0f:67:4a:4e:47:e4:
a1:4a:ea:a6:84:75:3d:ff:2e:53:b2:fa:ad:d1:86:d4:96:79:
66:69:dd:64:ee:63:ab:d2:b7:f5:26:2e:d0:0c:66:47:66:93:
29:65:b6:ba:08:40:c5:59:06:c5:18:54:37:b8:e2:3b:97:1d:
57:e2:7a:22:ae:3a:ee:1a:52:2d:97:5a:59:a7:11:f6:6a:3a:
90:1e:ff:32:dd:36:c1:ec:bf:ac:7c:96:71:5d:1e:ac:4e:24:
d8:28:a5:08:c8:62:b8:c8:b1:b2:74:9c:92:7f:a5:3a:29:40:
9f:da:6c:bb:e3:99:bf:0e:4f:61:a0:93:16:70:64:3b:dd:16:
db:0b:6c:10:17:dc:32:7e:4e:99:f3:e6:f4:07:b2:b0:f1:d5:
db:46:53:e4:8c:c7:e1:f4:aa:c0:0e:95:98:94:74:29:5e:d7:
57:a0:51:c1:00:41:ec:f1:90:b5:4f:75:e8:9b:ef:b0:ba:2b:
63:b6:87:32:59:44:e0:f4:b1:ae:5f:3a:09:52:c3:33:d7:3b:
60:43:27:bb:b2:fa:f7:5d:b5:f4:a7:9d:0c:79:9c:25:2d:8c:
70:ae:c5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:50:38 2026 by rpki-client